Mediawiki

    Dashboard / Vendors

    Products: 30
    Vulnerabilities: 502
    Known Exploited: 0
    21
    Critical Level Threats
    82
    High Level Threats
    340
    Medium Level Threats
    22
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2024-23176

    MassMessage Extension XSS via i18n Key

    Last Modified: Sep 17, 2026
    Published: Sep 14, 2026

    CVE-2023-37253

    An issue was discovered in the ProofreadPage extension for MediaWiki through 1.39.3. It leaks information about a suppressed user via the API and config variables.

    Last Modified: Sep 17, 2026
    Published: Sep 14, 2026

    CVE-2023-37252

    An issue was discovered in the CheckUser extension for MediaWiki through 1.39.3. Special:CheckUserLog shows usernames that have been hidden.

    Last Modified: Sep 15, 2026
    Published: Sep 14, 2026

    CVE-2026-34095

    action=raw with Special:Mypage subpage title responds with "Content-Type: text/html" on ctype=text/javascript request

    Last Modified: May 13, 2026
    Published: May 11, 2026

    CVE-2026-34094

    Customized help link for page protection indicator is relative to subpage name, because the link target is missing the "/wiki/" prefix

    Last Modified: May 18, 2026
    Published: May 11, 2026
    Items Per Page